mastodon - Link to source

🚨 Privacy Win 🚨

The USA's loudest endorsement ever: CISA urges everyone to use encryption!

Use services like #Signal and #Tuta to secure your online communication.

Here's the news: tuta.com/blog/us-cisa-endorses…

in reply to AzureCerulean

@AzureCerulean Yes, that's why in Tuta the keys are generated on your client, encrypted with your password,and only then sent to the server - in encrypted form. The keys never get decrypted on the server, and you can check this as the code is open source. Here are more details: tuta.com/de/blog/private-key
in reply to Tuta

But who controls the data on the server? Is it self-hostable, It' might be end-to-end encrypted from the user to the server and back, but that's where it ends.

You might as well use apple and iMessage/iMail/iCal otherwise it's just as secure, and if/when a government comes in and says turn over your user data or intercept the messages they have too.

The Client maybe GPL3 But until the server is available and released under the same license there is no reason to change.

⇧